Analysis of Data from Mobile Voting Pilots
Shares empirical attack telemetry and threat vector data collected across real-world smartphone mobile voting pilot deployments.
Summary
Telemetry from Live Mobile Voting Pilots
Deploying mobile smartphone voting applications in pilot jurisdictions across the United States generated extensive telemetry on remote attack attempts and malicious probing.
Empirical Threat Vector Analysis
Analysis of collected telemetry categorizes attacks by geographic origin, duration, and lethality, detailing coordinated attempts to compromise client devices and backend application APIs.
Evaluating Defensive Mitigations
Comparing successful and unsuccessful defensive countermeasures highlights the effectiveness of rate limiting, client attestation, and API shielding against automated vulnerability scanning.
Public Release of Anonymized Attack Datasets
Publishing anonymized threat data in the public domain provides independent election researchers with empirical baselines to study adversary tradecraft targeting mobile ballot return platforms.
Related talks
Voting Village·25 min
Susan Greenhalgh
Susan Greenhalgh exposes last-minute changes to the EAC Voluntary Voting System Guidelines (VVSG 2.0) that permit wireless connectivity in voting machines.
Voting Village·25 min
Harri Hursti
Voting Village co-founder Harri Hursti welcomes in-person and virtual attendees to DEF CON 29, framing key research themes and voting machine testing labs.
Voting Village·1 hr 14 min
Amélie Koran
Convenes a panel to examine emerging cyber threats, disinformation campaigns, and coordinated vulnerability disclosure ahead of the 2020 election.


